Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IdhDqdSXo3VwUqjqeGJohtadxl4.roa
File: IdhDqdSXo3VwUqjqeGJohtadxl4.roa (raw, json)
Hash identifier: v2jyn8nlBHPCjNqV+3C5VZxnP+cAQk3dabhpnxzdk+Q=
Subject key identifier: 21:D8:43:A9:D4:97:A3:75:70:52:A8:EA:78:62:68:86:D6:9D:C6:5E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01975835FC02ADD8DDFFDB1F8BF16684CCCE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IdhDqdSXo3VwUqjqeGJohtadxl4.roa
Signing time: Tue 10 Jun 2025 05:00:22 +0000
ROA not before: Tue 10 Jun 2025 05:00:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 151.242.61.0/24 maxlen: 24
151.244.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Jun 2025 15:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:35:fc:02:ad:d8:dd:ff:db:1f:8b:f1:66:84:cc:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 10 05:00:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21d843a9d497a3757052a8ea78626886d69dc65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:a8:af:76:84:d1:0e:86:06:95:cf:33:ac:
ca:94:a7:b7:44:a3:09:98:c5:7a:82:71:53:77:9c:
b4:d6:36:75:cb:3c:72:b3:55:c8:3d:bc:1b:27:ba:
58:71:d1:b6:cb:73:29:75:57:39:bd:d2:92:02:c9:
d9:4e:c8:70:01:43:15:42:d3:33:01:d0:84:dd:c9:
b8:cb:ca:ad:a4:38:38:c0:da:88:bc:88:c6:37:74:
59:38:07:af:61:5c:1b:f7:53:73:1c:f4:39:f0:76:
d5:4c:50:f6:81:92:8f:95:eb:bd:e0:5b:ff:cb:61:
f9:bc:b4:2c:e6:a6:29:0e:15:64:bc:46:d9:47:dc:
1b:db:53:bd:d8:46:23:31:94:7d:80:12:75:ef:3a:
99:1a:9f:ad:fe:00:18:4d:bc:76:22:bc:d3:13:35:
9e:04:c7:d5:d8:a6:e9:d7:d1:df:40:f3:a6:6c:bf:
51:a4:cb:69:e3:c5:b5:87:32:0c:46:9c:6a:2d:eb:
f5:7d:04:7c:f2:ed:7b:c2:c1:de:22:4f:92:ec:91:
ed:9a:4b:38:f5:4d:aa:47:81:eb:72:66:b0:76:97:
15:04:a6:cc:75:59:d8:6b:aa:cf:7c:20:43:53:21:
f2:0a:8e:61:8b:95:24:eb:7e:60:49:3b:1e:45:04:
2a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D8:43:A9:D4:97:A3:75:70:52:A8:EA:78:62:68:86:D6:9D:C6:5E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IdhDqdSXo3VwUqjqeGJohtadxl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.61.0/24
151.244.128.0/18
Signature Algorithm: sha256WithRSAEncryption
ab:5a:0c:06:8c:46:e2:1e:1a:d7:d0:0c:42:ca:00:16:f1:f9:
95:f8:a7:67:73:cc:ef:df:2a:a1:19:f6:48:eb:00:49:45:51:
ac:60:05:36:a9:d4:3b:68:22:31:80:ce:52:22:79:10:58:8d:
56:84:9c:12:22:9d:40:79:36:bd:83:68:2d:b5:1d:cd:ca:ec:
88:ad:1c:af:53:47:69:a9:a4:09:88:9d:60:25:75:cb:dc:7b:
5b:e7:97:a0:e9:b4:7e:b7:ea:f3:f5:3b:44:fa:13:f5:5a:c0:
7c:fd:85:2a:5c:b6:07:5f:da:3c:77:83:88:61:b3:25:de:23:
ab:94:81:3f:56:05:d4:bb:01:00:cb:75:06:9f:5d:df:49:7d:
2d:84:e2:fe:f8:b7:39:c9:8b:ec:50:17:d6:9d:d5:24:a6:d7:
6e:05:ec:3d:5f:6d:b5:1a:05:98:71:ac:15:3a:d1:0e:27:7a:
4d:4f:57:61:95:45:52:a4:8f:3a:cf:88:31:14:6e:a1:fe:22:
b0:31:d4:e3:28:09:0b:4c:3a:3f:24:4d:d3:c6:8f:18:39:a2:
6e:2b:62:1b:79:73:54:ad:eb:ac:d3:c4:1f:1d:3c:fc:a2:a6:
fb:ed:48:53:8a:36:e5:4c:8c:fa:b8:fa:8b:28:9f:5b:48:75:
fc:ee:4b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 19:15:01 2025 by rpki-client